fix sqli
Merge pull request #1 from sczi/fixsqli

fix sqli